LACNIC promotes the creation of Computer Security Response Teams

25/11/2016

This month, close to 60 professionals and experts in Belize and Bolivia received training on computer security and the creation of security incident response teams at two new workshops organized by the AMPARO project, a LACNIC initiative.

The goal of these workshops was to develop capacity for the creation of Computer Security Incident Response Teams in both countries.

Titled “How to set up a CSIRT,” the Belize workshop was the first AMPARO workshop presented exclusively in English. Organized by LACNIC and the Belize Internet Exchange Point, the activity was attended by companies and organizations representing IXPs, Belize Internet providers and the University of Belize.

The workshop was presented by Graciela Martínez of LACNIC. Ernesto Pérez of CEDIA Ecuador helped in preparing the workshop.

Martínez highlighted the experience in Belize and noted that local organizations were interested in starting to work on cybersecurity issues. “The idea of creating a CSIRT at IXP level was strong,” she said.

From Belize, the LACNIC team traveled to La Paz, Bolivia, where they held another workshop with the local support of the Bolivian Telecommunications and Transportation Regulation and Oversight Authority.

Over the course of three days, 40 professionals representing public organizations and companies of different sectors received training on computer security, among them NIC.bo, ISPs, AGETIC, banking institutions, the Army, the Bolivian Police, the General Personal Identification Service (SEGIP), and the Financial System Supervisory Authority (ASFI). This time, Patricia Prandini of Argentina joined Martínez and Pérez for presenting the workshop.

“We were met by an audience eager to participate and learn. Teams worked very enthusiastically,” said Martínez.

The implementation of a Computer Security Incident Response Team is very advanced in Bolivia, particularly after the decree creating the Agency for e-Government and Information and Communication Technologies (AGETIC). Article 8 of this decree also establishes the implementation of a Computer Security Incident Management Center (CGII) as part of AGETIC’s technical operational structure.

Balance. The workshops held in both Belize and Bolivia were structured in modules so that workshop attendees would be able to set up an Incident Response Team. “It is important that participants are faced with the challenge of thinking about every aspect involved in the creation of a CSIRT and its subsequent implementation,” noted Martínez.

Workshop participants were presented with cyber-attack scenarios and they had to manage these security incidents in groups, taking into account the various roles that may exist within a CSIRT.

The AMPARO Project —an initiative which LACNIC has been promoting since 2009— encourages the adoption of computer security practices such as Computer Security Incident Response Teams (CSIRT). The project is part of the services provided by LACNIC WARP to its members and to the community as a whole. –